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ABSTRACT 



A system and protocol are provided for routing data packets 
from a host on a LAN through a virtual address belonging 
to a group of routers. The host is configured to point to the 
virtual address so that the packets it sends out of its LAN are 
always direaed to a virtual router which may he any one of 
the group of routers. An active router in the group of routers 
emulates the virtual router. A standby router, also from the 
group of routers, backs up the active router so that if the 
active router becomes inoperative, the standby router auto- 
matically begins emulating the virtual router. The host router 
does not know which router from the group is actually 
handhng the data padcets it sends. If the standby router 
becomes inoperative or takes over for the active router, other 
routers in the group hold an election to determine which of 
them should take ova* for the standby router. 



31 Claims, 7 Drawing Sheets 




NO 



lESTHEACnVEROU 
HAVE A LOWER PRIORHY 
THE LOCAL ROUTER V 




YES 




IS THE LOCAL ROUTER 
^GURED TO PREEMPT2/ 

[res 184 




SENDACOUP 
MESSAGE TO THE 
ACTIVE ROUTER 



188 



RECEIVE A RESIGN MESSAGE 
FROM THE ACTIVE ROUTER 





ASSUME THE 


s ► 


ACTIVE 


)yes 


ROUTER STATE 



f DWE J 



190 



02/04/2004, EAST Version: 1.4.1 



U.S. Patent Dec S, 1995 sheet 1 of 7 



5,473,599 



10 



68 



56 



54 



TOKEN 
RING 



SERIAL 
COMM. 
INTERFACE 



MULTIPORT 
COMMUNICATIONS 
INTERFACE 



-52 



CONTROLLER 




26 



12 



MULTIPORT 
ETHERNET 



FDDI 
INTERFACE 



_24 



.15 



> 



HG. 1 



02/04/2004, EAST Version: 1.4.1 



U.S. Patent Dec 5, 1995 sheet 2 of 7 5,473,599 



118 







R 

2 




«3 







9 



120 



74 



N 

-6 



H 



124 

-A. 



N 



130 



126 



"1 



4 



Hi 



Jig ^26 



02/04/2004, EAST Version: 1.4.1 



U.S. Patent Dec. 5,1995 sheet3 f? 5,473,599 



NO 



ENTER 
STANDBY 
STATE 



I 



/llASACnVE ROUTERS 
r-W ISSUED A RESIGN 
\. MESSAGE? 

^NO 



kSACnVE ROUTER" 
STOPPED SENDING 
HELLO MESSAGES? 



YES 



YES 



STANDBY ROUTER 
ASSUMES ROLE OF 
ACnVE ROUTER 



f DONE j 



02/04/2004, EAST Version: 1.4.1 



U.S. Patent Dec S, 1995 sheet 4 of 7 5,473,599 




STOP 
SENDING 

HELLO 
MESSAGES 



/"''HAS THE ACTIVE OR 
( STANDBY ROUTER STOPPED 
^^^ING HELLO MESS AGES3 

^ NO 

/^liASTIffiNEW ROUTES" 
( RECEIVED A RESIGN 
X,.,^^ MESSAGE? 

164 



NO 



YES 158 
^ 



SEND HELLO 
MESSAGES 



I 



YES 



ISANYNON-ACnVE 
SPEAKING ROUTER OF 
HIGHER PRIORITY? 



NO 




ASSUME ROLE OF 
STANDBY ROUTER 



V.166 



170 



m4 



02/04/2004, EAST Version: 1.4.1 



U.S. Patent 



Dec. 5, 1995 Sheet 5 of 7 5,473 

174 



176 



180 

)OES THE ACTIVE ROIH^X 
HAVE A LOWER PRIORITY ) 
>3HAN THE LOCAL ROUT^?/ 





I 



YES 



NO IS THE LOCAL ROUTER 
:01SrFIGURED TO PREEMPT?/ 




STANDBY 
NO V STATE? 



YES 



YES 184 



SEND A COUP 
MESSAGE TO THE 
ACnVE ROUTER 



188 



RECEIVE A RESIGN MESSAGE 
FROM THE ACTIVE ROUTER 



HASACnVE 
ROUTER FAILED 
OR RESIGNED? 



YES 



I 



ASSUME THE 

ACnVE 
ROUTER STATE 



190 



el98 



02/04/2004, EAST Version: 1.4.1 



U.S. Patent Decs, 1995 sheet 6 of 7 5,473,599 




02/04/2004, EAST Version: 1.4.1 



U.S. Patent Dec. S, 1995 sheet 7 of 7 5,473,599 



STATE 



Event 


Virgin 


Learn 


Listen 


Speak 


Standby 


Active 


1 

config 


SlartAT 
StartST 
Learn or 
Listen? 












2 

unconfig 


dearAY 
QearST 
Virgin 


QearAT 
QearST 
Virgin 


<3earAt 
QearST 
Virgin 


QearAT 
QearST 
Vii]pn 


QearAT 
ClcarST 
Virgin 


QearAT 
QearST 
Resign 
Virgin 


3 

ATcxp 






StartAT 
StartST 
Speak 




dearAt 
Acdve 




4 

Higher 
HeUo 








Listen 


StartST 
Listen 




5 

Higher 
HeUo 




snoop 
StartAT 
StartST 
Listen 


snoop 
StartAT 


snoop 
StartAT 


snoop 
StartAT 


StartAT 
StartST 
Speak 


6 

Lower 
Active 




snoop 
StartAT 
StartST 
Listen 


snoop 
StartAT 

Coup 
QearAT? 
Active? 
StartsST 


snoop 
StartAT 

Coup 
QearAT? 
Active? 
StartsST 


snoop 
StartAT 

Coup 
QearAT? 
Active? 


Coup 


7 

Resign 






StartAT 
StartST 
Speak 


StartAT 


QearAT 
Acdve 




8 

Coup 












Resign 
StartAT 
StartST 
Speak 


9 

STexp 






StartST 
Speak 


QearST 
Standby 






10 
Higher 
Standby 






StartST 


StartST 
Listen 


StartST 
listen 


StartST 


U 
Lower 
Standby 






StartST 
Speak 


(lUearST 
Standby 




StartST 



Fig. 7 



02/04/2004, EAST Version: 1.4.1 



5,473,599 



10 



20 



25 



30 



STANDBY ROUTER PROTOCOL 

BACKGROUND OF THE INVENTION 

The present invention relates to network systems having 
redundant routers for receiving packets from a host on a 
. LAN. More specifically, the invention provides a "standby 
group" of routers including an "active" router which handles 
packets from the host and a "standby" router which backs up 
the active router should it fail. 

Local area networks (LANs) are commonly connected 
with one another through one or more routers so that a host 
(a PC or other arbitrary LAN entity) on one LAN can 
communicate with other hosts on different LANs. Typically, 
the host recognizes only those addresses for the entities on 
its LAN. When it receives a request to send a data packet to 
an address that it does not recognize, it communicates 
through a router which determines how to direct the packet 
between the host and the address. Unfortunately, a router 
may, for a variety of reasons, become inoperative (e.g., a 
power failure, rebooting, scheduled maintenance, etc.). 
When this happens, the host communicadng through the 
inoperative router may still remain connected to other LANs 
if it can send packets to another router conneaed to its LAN. 

Various protocols have been devised to allow a host to 
choose among routers in a network. Two of these. Routing 
Information Protocol (or RIP) and ICMP Router Discovery 
Protocol are examples of protocols that involve dynamic 
participation by the host. The host in a RIP system receives 
the periodic routing protocol packets broadcast by the vari- 
ous routers on the system and thereby keeps track of 
available routers. If a router stops sending protocol packets, 
the host assumes that the router is no longer operative and 
stops sending data through that router. Unfortunately, rout- 
ing protocol packets contain relatively large amounts of data 
including all the specific routes laiown by the routers. 
Because the host periodically receives these rather large 
packets, the system bandwidth is reduced. 

In ICMP Router Discovery, the host keeps track of ^ 
operative routers by listening for router reachability mes- 
sages. These messages contain a list of IP addresses of 
usable routers together with preference values for those 
routers. Because these messages are relatively small (in 
comparison to routing protocol packets received by the host 
in RIP) and are not coupled time-wise with any routing 
protocol, the bandwidth utilization is improved in compari- 
son with RIP. Nevertheless, both RIP and Router Discovery 
require that the host be dynamically involved in the routo- 
selection, thus reducing performance and requiring special 
host modifications and management. 

In a widely used and somewhat simpler approach, the host 
recognizes only a single "default" router. In this approach, 
the host is configured to send data packets to the default 
router when it needs to send packets to addresses outside its 
own LAN. It does not keep track of available routers or 
make decisions to switch to different routers. This requires 
very little effort on the host's part, but has a serioiis danger. 
If the default router fails, the host can not send packets 
outside of its LAN. This will be true even though there may 
be a redimdant router able to take over because the host does 
not know about the backup. Unfortunately, sudi systems are 
now widely used in mission critical applications such as 
stock trading. 

Other systems in which the host becomes overly depen- 
dent upon a single router have similar problems. For 
example, in a "proxy ARP" protocol, a router may give a 
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host its address in response to the host's request for an 
address outside of its local LAN. Thereafter, the host directs 
its traf&c through that ruutei If the host does not often 
update its ARP table entry (which lists physical addresses of 
avaUable routers), it may continue to assimie that it should 
send all data packets through the same router, even after that 
router fails. Unfortunately when this happens, the host can 
no longer communicate outside its own LAN. 

In view of the above, it would be desirable to have a 
network system in which the hosts are not dynamically 
involved in router selection, and yet are able to handle 
failures by an assigned router. 

SUMMARY OF THE INVENTION 

The present invention provides a system and protocol for 
routing data packets finom a host on a LAN through a virtual 
router. The host is configured so that the packets it sends to 
destinations outside of its LAN are always addressed to the 
virtual router The victual router may be any physical router 
elected from among a **standby group" of routers coimected 
to the LAN. The router from the standby group that is 
currently emulating the virtual router is referred to as the 
"active" router. Thus, packets addressed to the virtual router 
arc handled by the active router. A "standby** router, also 
from the group of routers, backs up the active router so that 
if the active router becomes inoperative, the standby router 
automatically begins emulating the virtual router. This 
allows the host to always direct data packets to an opera- 
tional router without monitoring the routers of the network. 

In one aspect, the present invention provides a router for 
use in the described standby group. Such a router includes 
(1) a primary router address; (2) a group virtual address 
which is adopted by the router when it becomes the active 
router of the network segment; (3) means for assuming the 
group* s virtual address; (4) means for issuing a coup mes- 
sage to notify a current active router that the router will 
attempt to replace the active router; and (5) means for 
disabling the means for issuing a coup message. In preferred 
embodiments, each router of this invention has the capabil- 
ity of adopting both the standby and active statuses depend- 
ing upon the current circumstances in the network. 

The coup message provides a router with the ability to 
take over the role of active router should it determine that it 
has a priority higher than that of the active router. Each 
router is configured with a priority. Generally, the router 
with the highest priority is the active router. However, if a 
new router (i.e., a router that has neither the active nor 
standby status) having the highest priority enters the net- 
work group, it becomes active router only through a defined 
protocol. This involves sending a coup message containing 
the new router's priority. When the active router determines 
that the router sending the coup message has a higher 
priority, the active router sends a resign message and 
removes the group's virtual address. When this occurs, the 
active router ceases to emulate the virtual router — a role 
now taken by the new router. In some cases, it will be 
desirable for a router to be configured so that it will not send 
coup messages in this simation. Thus, the routen of this 
invention preferably include means for disabling the means 
for sending coup messages in a inannpr such Uiat a new 
higher priority router entering the group does not automati- 
cally preempt an active router. 

A router can determine when the active or standby routo" 
is ISO longer operating by listening for "hello" messages 
from these routers. Thus, the routers of this invention 
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preferably include means for sending and receiving hello 
messages. The hello message preferably includes a router 
priority, a router status (e.g., active, standby, or new), and the 
group virtual address. Thus, the listening routers can deter- 
mine a speaking router's stams and priority. If a new router 5 
determines that the priority of the active routo- is lower than 
its own, it may said a coup message. If a new router no 
longer hears hello messages issuing from the active or 
standby router, it can assume that router is no longer 
operational. Thereafter, the new router together with other lO 
new routers can elect and install a replacement standby 
and/or replacement active router. This election preferably is 
performed automatically, without requiring that a user inter- 
vene to specify the replacement router. 

In another aspect, the present invention provides a method i^ 
for backing up an active router. The method includes the 
following steps: (1) specifying an active router for routing 
data packets from the host; (2) specifying a standby router 
which backs up the active router, (3) causing the active 
router to emulate a virtual router; (4) causing die host to 20 
address data packets to the virtual router, and (5) automati- 
cally selecting a new active router based upon a comparison 
of die priorities of the multiple routers in die network. In the 
case of a coup, the step , of selecting a new active router 
includes the following steps: (a) detecting a coup message 25 
from a new router indicating that it wishes to take over as the 
active router; and (b) selecting the new router as the active 
router if its priority is higher than that of the active router. 
In the case where the active router simply leaves the system 
(due to a bad connection for example), the step of selecting 30 
a new active router includes the following steps: (a) deter- 
mining when an active router has left the network (by no 
longer hearing hello messages from the active router, for . 
example); and (b) if the active router has in fact left die 
network, selecting the standby router as die active router. 35 
Note that in this case, the standby router should automati- 
cally take over for the active router, and the other routers in 
die system must then decide among themselves which one 
will become the new standby router. 

These and other features and advantages of the present ^ 
invention will be presented in more detail in die following 
specification of the invention and the figures. 

BRIEF DESCRIPTION OF THE DRAWINGS 

45 

HG. 1 is a block diagram of a router that may be used in 
this invention; 

FIG. 2a is a block diagram of a networic segment in 
accordance with this invention having a standby group of 
routers and a virtual router for the standby group; 50 

FIG. 26 is a block diagram of a netwoik segment having 
two standby groups of routers, each having a router which 
emulates a group virtual router, 

FIG. 3 is a process flow diagram showing generally the 
steps involved in replacing a departing active router (which 
emulates die group virtual router) with a standby router, 

FIG. 4 is a process flow diagram showing the steps 
involved in replacing a departing standby router witii a new 
router from a group of routers; 

HO. 5 is a process flow diagram presenting the processes 
by which a new router entering a neiworic segment can 
become an active router in accordance with tins invention; 

FIG. 6 is a state diagram of a router in a prefeired 
embodiment of iMs invention; and . 65 

FIG. 7 is a chart showing the events which cause a router 
of FIG. 6 to change states. 
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DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

1. Definitions 

The following terms arc used in die instant specification. 
Their definitions are provided to assist in undentanding the 
preferred embodiments described herein. 

A "host" is a PC or odier arbitrary n^work entity residing 
•on a LAN and communicating with network entities outside 
of its own LAN through a router or bridge. 

A **rouiei'* is a piece of hardware which operates at the 
network layer to direct packets between various LANs of the 
network, llie network layer generally allows prairs of entities 
in a network to communicate with each other by finding a 
path through a series of connected nodes. 

An 'TP (internet protocol) address" is a network layer 
address for a device operating in the IP suite of protocols. 
The IP address is typically a 32 bit field, at least a portion of 
which contains information corresponding to its particular 
network segment. Thus, the IP address of a router may 
change depending upon its location in a network. 

A '"MAC address" is an address of a device at die sublayer 
of die data link layer, defined by the IEEE 802 committee 
that deals with issues specific to a particular type of LAN. 
The types of LAN for which MAC addresses are. avaUable 
include token ring, FDD!, and ediemet. A MAC address is 
generally intended to apply to a specific physical device no 
matter where it is plugged into die network. Thus, a MAC 
address is generally hardcoded into the device — on a rout- 
er' s ROM, for example. This should be distinguished from 
the case of a network layer address, described above, which 
changes depending upon where it is plugged into the net- 
work. MAC is an acronym for Media Access Control. 

A ''virtual address" is an address shared by a group of real 
network entities and corresponding to a virtual entity. In the 
context of this invention, one router frovm among a group of 
routers emulates a virtual router by adopting one or more 
virtual addresses, and another entity (usually a host) is 
configured to send data packets to such virtual address(es), 
regardless of which router is currendy emulating die virmal 
router. In preferred embodiments, the virtual addresses 
encompasses both MAC layer and network layer addresses. 
Usually various members of die group each have the capa- 
bility of adopting die virtual address (although not at the 
same time) to emulate a virtual entity. 

A ^'packet" is a collection of data aixd control information 
including source and destination node addresses, formatted 
for transmission from one node to another. In the context of 
this invention, it is important to note that hosts on one LAN 
send packets to hosts on another LAN through a router or 
bridge cormecting the LANs. 
Z Overview 

The invention employs various process steps involving 
data manipulation, lliese steps require physical maiupula- 
tion of physical quantities. Usually, though not necessarily, 
these quantities take the form of electrical or magnetic 
signals capable of being stored, transferred, combined, com- 
pared, and odienvise manipulated. It is sometimes conve- 
nient, principally for reasons of common usage, to refer to 
diese signals as bits, values, variables, characters, data 
l^kets, or the like. It should be remembered, however, diat 
all of diese and similar terms are to be associated widi the 
appropriate physical quantities and are merdy convenient 
labels s^Tplied to these quantities. 

Further, the manipulations paformed are often refared to 
in terms, such as estimating, running, selecting, specifying, 
determining, or comparing. In any of the operations 
described herein that form part of the present invention. 
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these operations arc machine operations. Useful machines 
for performing the operntions of the present invention 
include general purpose, and specially designed routers or 
other similar devices. In all cases, there should be borne in 
mind the distinction between the method of operations in 
operating a router or computer , and the method of compu- 
tation itself. The present invention relates to method steps 
for operating a router in processing electrical or other 
physical signals to generate other desired physical signals. 

The present invention also relates to an apparatus for 
performing these operations. This apparatus may be spe- 
cially constructed for the required purposes, or it may be a 
genera] purpose programmable machine selectively acti- 
vated or reconfigured by a computer program stored in 
memory. The processes presented herein are not inherently 
related to any particular router or other apparatus. In par- 
ticular, various general purpose machines may be used with 
programs written in accordance with the teachings herein, or 
it may be more convenient to construct a more specialized 
apparatus to perform the required method steps. For 20 
example, the routers of this invention are preferably spe- 
cially configured models AGS, MGS, COS, TGS, ICS, 
2000, 3000, 4000, and 7000 available from Qsco Systems, 
Inc. of Menlo Park, Calif. The general structure for a variety 
of these machines will appear from the description given 25 
below. 

Referring now to FIG. 1, a router 10 of the present 
invention includes a master central processing unit (CPU) 
62, low and medium speed interfaces 68, and high speed 
interfaces 12. In preferred embodiments, the CPU 62 is 
responsible for such router tasks as routing table computar 
tions and network management It may include one or more 
microprocessor chips 63 selected &om complex instruction 
set computer (CISC) chips (such as the Motorola 68040 
microprocessor), reduced instruction set computer (RISC) 
chips, or other available chips. In a preferred embodiment, 
a memory 61 (such as non-volatile RAM and/or ROM) also 
forms part of CPU 62. However, there are many different 
ways in which memory could be coupled to the system, 

Ihe interfaces 12 and 68 arc typically provided as inter- 
face cards. Generally, they control the sending and receipt of 
data packets over the network and sometimes support other 
peripherals used with the router 10. The low and medium 
speed interfaces 68 include a multiport communications 
interface 52, a serial communications interfaces 54, and a 45 
token ring intaface 56. The high speed interfaces 12 include 
an E^DI interface 24 and a multiport ethemet interface 26. 
Preferably, each of these interfaces Gow/medium and high 
speed) includes (1) a plurality of ports appropriate for 
communication with the appropriate media, and (2) an 50 
independent processor such as the 2901 bit slice processor 
(available irom Advanced Micro Devices corporation of 
Santa Qara Calif.), and in some instances (3) volatile RAM. 
The independent processors control such communications 
intensive tasks as packet switching and filtering, and media 
control and management By providing separate processors 
for the commimications intensive tasks, this architecture 
permits the master microprocessor 62 to ef&ciently perform 
routing computations, network diagnostics, security func- 
tions, etc. 

The low and medium speed interfaces are coupled to the 
master CPU 62 through a data, control, and address bus 65. 
High speed inter^ioes 12 are connected to the bus 65 through 
a fast data, control, and address bus 15 which is in turn 
connected to a bus controller 22. The bus controller func- 
tions arc provided by a processor such as a 2901 bit slice 
processor. 
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Although the system shown in FIG. 1 is a preferred router 
of die present invention, it is by no means the only router 
architecture on which the present invoition can be imple- 
mented. For example, an architecture having a single pro- 
cessor that bandies communications as well as routing 
computations, etc. would also be acceptable. Further, other 
types of interfaces and media could dso be tised with the 
router. 

FIGS. 2a and 2b show network segments including rout- 
ers R interconnecting a host H on a LAN L with one or niorc 
other LANs in a network N. For the purposes of this 
invention, any LAN supporting broadcast and link layer 
addressing independent of exact physical location is accept- 
able. It is to be understood that the LAN L includes other 
networic entities in addition to the host H, but in the interest 
of simplifying the figures, these entities arc not showiL 
Further, it should be understood that the routers in FIGS. 2a 
and 2b are cormected to at least one other LAN or WAN in 
addition to LAN L shown in the figures. Still further, for this 
invention, any data processing device in a LAN may be 
considered a host For exBnq}le, the host H may be a 
terminal, personal computer, workstation, minicomputer, 
mainframe, etc. It should be understood that the hosts may 
be manufactured by different vendors and may also use 
different operating systems such as MS-DOS, UNIX, OS/2, 
MAC OS and others. 

Referring to FIG. 2a, a network segment 118 includes 
host H on LAN L, a group of routers (including routers Rl, 
R2, and R3) on cable 120, and virtual rout^ R4. Host H is 
connected to routers Rl, R2, and R3 via cable 120 and 
bi-directional line 74. Bidirectional line 74 and cable 120 
may be any suitable media such as coaxial cable, shielded 
and unshielded twisted pair wiring, fiber optic line, radio 
channels, and the like. The LAN in which the host resides 
may assume a variety of topologies, including ring, bus, star, 
etc. Fuitha^, these LANs may have different physical con- 
figurations such as token ring (IEEE 802.5), etheraet (IEEE 
802.3), and fiber (distributed data interface or 'TODF' (ANSI 
X3T9J). 

At any one time, one of the routers Rl, R2, or R3 assumes 
the state of active router, a condition requiring that it emulate 
the virtual router R4. The host H is configured to point to 
virtual router R4, regardless of which real router (Rl, R2, or 
R3) is currentiy emulating it Thus, when the host H needs 
to send data packets outside of LAN L, it directs them to 
virtual router R4. A virtual router in this invention is defined 
by virtual MAC layer and network layer (e.g., IP) addresses 
which are shared by a group of routers tunning the protocol 
of this inventioa The router selected by the protocol to be 
die active router (Rl, R2, or R3 in this case) adopts these 
virtual MAC and network layer addresses — possibly in 
addition to its own addresses — and thus receives and routes 
packets destined for the group's virtual router. In the router 
group shown of FIG. 2a there will be 4 pairs of addresses 
(each pair includes a MAC and a network layer address): one 
for router Rl, one for router R2, one for router R3, and one 
for the group or virtual router R4, 

One of the routers in the group (Rl, R2, or R3) assumes 
the state of standby (or backup) router. When the standby 
router detects that the active router has failed, it takes over 
as the active router by adopting the group's MAC and IP 
addresses. A new standby router is automatically selected 
from among the other routers in the group — assuming there 
are more than two routers in the group. In the simple 
example provided in FIG. 2a, if the routo- Rl is initially the 
active router, the host will send packets through Rl because 
Rl has adopted the MAC and network layer addresses of R4. 
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Further, if router R2 is the standby router, a failure by Rl 
will cause R2 to become the active router. After such failure, 
the host will contiiiue sending data to the MAC and ff 
addresses of R4 even though that data is now transferred 
though a different router. It is important to recognize that any 
router in a standby group can assume the roles of standby or 
active rouier. 

Purtfaer, a new router within the group may attempt a coup 
of the active router if it believes that it meets the conditions 
necessary to perform as active router. In this case, the new 
router (e.g., R3) first determines whether it has •'priority" 
over the current active router (explained below). If so, it 
issues a coup message and the current active router resigns, 
whereupon the new router takes over the status of active 
router. 

The procedures of selecting active routers based upon 
priority has some elements in common with the procedures 
employed in the routing protocols OSPF and IS-IS. How- 
ever, imlike these conventional routing protocols, the goal of 
the present invention is to provide an active router which 
emulates a virtual router for a host's benefit. Further, the 
present invention provides a mechanism by which the pre- 
empt capability (ability to coup) can be switched oS so that 
the new router does not automatically take over as active 
router when it enters the network group. This new feature is 
desirable because network operation may be delayed for a 
short period while the coup takes place. Hius, the ability to 
switch off the preempt capability may prevent unnecessary 
system delays. 

Referring now to FIG. 2b, a network segment having two 
groups of routers is shown. Such network segments are 
appropriate when different hosts on a LAN have their own • 
standby groups of routers. In other words, each host has its 
own active routCT, standby router, and new routers (if there 
are more than two routers in the standby group). Each such 
standby group connected to the LAN follows the protocol 
for emulating a virtual router and selecting active and 
standby routers as described above. Employing multiple 
standby groups might be beneficial in a situadon where 
different groups of users within an organization (a marketing 
group and a finance group, for example) share the same 
LAN. The marketing group may use one standby group of 
routers to send packets outside of the LAN while the finance 
group uses another standby group to send its data packets 
outside of the LAN. In FIG. 2b, host HI has a standby group 4S 
of routers 124. This group includes real routers Rl and R2 
as well as virtual routers R3. Similarly, host H2 in LAN L 
sends its data packets through standby group 126 on network 
N. Standby group 126 includes real routers R5, R6, and R7 
together with virtual router R4. All routers connected widi 
LAN L are connected through cable 130. Each of standby 
groups 124. and 126 has its own network layer and MAC 
addresses which are adopted by the active router emulating 
the virtual router. In some situations, a given router may 
exist in two different groups. For example, in FIG. 2b, router 
R5 might exist in group 124 as well as group 126. To do so, 
it would have to be configured to adopt the MAC addresses 
for virtual routers R3 and R4 as well as it own physical MAC 
address. In theory, such a router could be a member of as 
many groups as the number of additional MAC addresses it 
could adopt 

In each of the above examples, the standby group . 
included at least two routers. In preferred embodiments,, 
standby groups include at least three real romers. However, 
some redundancy can also be obtained with a single router 6S 
and two interfaces using "dial backup." In this embodiment, 
one interface is designated a primaiy interface and the other 
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a backup. When the primary interface fails, the backup 
interface begins to be used. 

The standby protocol of this invention can be r\m on any 
of a number of transport protocols inchiding TCP {'Trans- 
mission Control Protocol"), UDP ('User Datagram Proto- 
cor), CLNP, and XNS ("Xerox Network System"). Prefer- 
ably, UDP is used as the transport protocol of this invention. 

As noted above, the routers of this invention preferably 
run on an IP network layer. However, their application is not 
limited to any specific networic layer protocol. For example, 
the standby protocol of this invention could also nm on D^X 
which is a network layer protocol used underneath **Net- 
ware**^ available from Novell, Inc. of Provo, Utah, When 
the standby protocol of this invention is implemented for 
IPX, an active router must emulate a virtual IPX router 
rather than a virtual IP router. Such an active router will be 
the only router in the group to respond to GNS fGet Nearest 
Server**) requests issued by hosts. 

It should also be recognized that the protocol of this 
invention can in some circumstances be used to emulate 
virtual bridges (as opposed to virtual routers). For example, 
SRB C*source routing bridging") is a protocol allowing for 
multiple bridges operating in parallel. In implementing this 
invention in SRB, one bridge from a group would have to 
emulate a virtual brieve. For example, a virtual bridge 
number could be employed in much the same manner as the 
virtual IP addresses used for router standby groups. 
3. A Router Enters or Leaves the Network Group 

In a preferred embodiment, routers enter and leave the 
network according to a procedure which efficiently deter- 
mines whether an active router nmst be replaced, and if so. 
determines how that router is to be replaced. A router may 
leave a network segment in one of two ways: (1) it can 
sin^)ly go down without first notifying the other routers, or 
(2) it can ofiSdally resign by broadcasting its departure. 
Examples of the first case include a router ahmptiy losing 
power, crashing, system reloading, etc Examples of the 
second case include scheduled maintenance, etc. Generally, 
the broadcast resignation is preferable because it allows 
other routers in the network to take immediate steps and 
thereby smooth the transition. A router which leaves the 
group can subsequently reenter, but can not immediately 
assume the role of active or standby router. The reentering 
router will have to await appropriate circumstances before 
assuming such a role. 

Tb negotiate wiUi one another for the statuses of active 
and standby routers, the routers of the this invention can 
send three types of relevant messages: hello messages, coup 
messages, and resign messages. Hello messages notifies 
other routers in the network that . a particular router is 
operational in die system. The format of such hdlo message 
is generally sinular to that of the hello messages used in 
protocols such as OSPF. Coup messages from local routers 
tdl active routers thai a local router wishes to take over as 
the active router. Resign messages tell the other routers that 
an active router wishes to leave its post 

Depending upon the cuiient router's state and the infor- 
mation contained in each of these messages, a given router 
may or may not change its state. Most generally, the routers 
of tills invention can assume one of Uiree states: new. 
standby, and active. As will be explained below, a new router 
actually resides in one of foiu" substatcs. Active routers have 
adopted tiieir group's virtual IP and MAC addresses and 
therefore handle packets from the group's host tiiat are 
directed outside of its LAN. The standby router is available 
to immediately take over as active router if the cuntm active 
router should fail or resign. Both active and standby routers 
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issue periodic hello messages to let the other routers on the 
netwoiic know their statuses. New routers may listen for 
these hello messages and may under some circumstances 
issue their own hello messages or attempt a coup of the 
active router. 5 

If an active or standby router fails or otherwise leaves a 
standby group, it will simply stop sending hello messages. 
At the end of a defined length of tii&e during which no hello 
messages are received from the active router, the standby 
router will take over. The new routers in the segment wiD 10 
then conduct an clccdon to instaD a new standby router in 
place of the one that took over as active router. If neither the 
acdvc router nor the standby router is funcdoning. the new 
routers will conduct an election to fill both the acdve and 
standby slots. In this case, the new router with the highest 15 
prionty assumes the role of acdve router and the new router 
with the second highest priority assumes the role of standby 
router. 

When a standby router receives an active router's resign 
message (when, for example, it is being taken down for 20 
scheduled maintenance), the standby router automatically 
assumes the role of active router At the same time, the new 
routers (having also received die resign message) anticipate 
that there will not be a standby router and conduct dieir own 
election. As a result of the election, a new standby router is 25 
installed from among the group of new routers. 

As suggested, each router has a specified priority which is 
used in elections and coups of the active router. A priority is 
configured for each router by a user of the network. The 
priority of each router is preferably an integer between 0 and 30 
255 (i.e.. an 8 bit word) with 100 being die default 
Generally, the router having die highest priority should be 
the active router and the router having the second highest 
priority should be the standby router. When routers enter or 
leave the network group, the priority-based elections and as 
coups of this invention smooth the tiansition so that the 
group routers can quickly and with minimal disruption 
assume their correct status in the system. In the event that 
two routers having the same priority are seeking the same 
status, the primary IP addresses of these routers are com- 40 
pared and the router having the higher IP address is given 
priority. 

Two important events in this invention are detailed in the 
flow charts of FIGS, 3 and 4. The first of these involves a 
standby router taking over for an active router which has left 45 
its standby group for some reason. The second of these 
involves a new router taking over for a standby router which 
has assumed the role of designed router. It should be 
understood that these flow diagrams as well as the others 
presented herein are provided as convenient representations 50 
to aid in understanding the state transitions of router used in 
this invention. Some of the flow diagrams are organized in 
a manner that could imply diat the system checks for certain 
actions by event loops or polling. No such limitation is 
intended. Thus, the process flow charts presented herein 55 
should not be read to irnply that the system necessarily 
checks for events in the order listed. 

FIG. 3 presents a process flow diagram showing the 
conditions under which a standby router takes over when an 
active router leaves its standby group. It should be under- 60 
stood that a standby router can become active under other 
circumstances (Le., receipt of a lower priority hello from the 
current active router when the standby router is configured 
to preempt). For purposes of FIG. 3, however, it is assumed 
diat the aoive router has left without provocation ftom 65 
anodier router. The other cases will be addressed in the 
discussion of FIG. 5 and elsewhere. The process of FIG. 3 
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begins at 134 and in a stq) 138, die router under consider- 
ation enters the standby state.- Next, the standby router 
determines whether the cunent active router has issued a 
resign message in a decision step 140. If not, the standby 
router determines whether the active router has stopped 
sending hello messages in a step 144. As long as decision 
steps 140 and 144 are answered in the negative, the standby 
router continues to await an event in which one of these 
decisions can be answered in the affirmative. When diat 
happens, the standby router assumes the role of active router 
in a step 146, ThCTcafter, the process is concluded at 148. 

FIG. 4 shows how a router in die new state can take over 
for a standby which has left its post in the standby group. 
The standby router could be asked to relinquish its post by 
another router, but that situation will not be addressed here. 
Tlie process begins at 150 and in a step 154, the router under 
consideration enter the new state. Next, in a decision step 
156, that router determines whether the acdve or standby 
routers have stopped sending hello messages. If not, the 
router determines whether it has received a resign message 
in a decision step 157. The router continues asking the 
questions posed in steps 156 and 157 until one is answered 
in the affiimative. At that point, the router begins sending its 
own heUo messages at step 158. lliereafter in a decision step 
160, the new router determines whether any non-active 
router which is cuirendy speaking has a higher priority than 
its own. If not, the new router assumes the role of standby 
router at a step 166 and the process is concluded at 170. U, 
on the other band, decision step 160 is answered in the 
negative, die new router stops sending hello messages at step 
164 and the process control returns to decision step 156. 

The above discussion of FIG. 4 assumes that only die 
standby router will need to be replaced. Normally, when an 
active router stops sending hello messages, die standby 
router will take over after die hold time expires. It dien begin 
sending its own hello messages (as active router) before the 
next hold time for the active router expires. Thus, the new 
routers recognize that they are not to take over for the 
previous active router. However, if both the active and 
standby routers have left dieir posts, then the new router 
with die highest priority will actually take over the role of 
active router. The process is essentially identical to diat 
oudined in FIG. 4, except thai the new router assumes die 
role of active router after fint assuming the role of standby 
router at step 166. 

The abrupt departure of an active or standby router from 
the network group without first issuing a resign message is 
noted by the other routers in the system by the absence of a 
hello message. Nonnally, the active and standby routers 
send periodic hello messages — once every predefined **hel- 
lotime." However, as indicated in FIG. 4, new routers which 
have not discovered an active router widun 'lioldtime" may 
also send hello messages. That is, when a new router does 
not hear a hello message from a standby and/or active router 
widiin a predefined period known as a ^lioldtime " die new 
router begins sending its own hello messages. In a preferred 
embodiment, the default hellotimc is between about 1 and 3 
seconds and the default holdtime is between about 3 and 10 
seconds. Typically, die bold time is at least diree times die 
hello time. All routers in the same group use the same 
hellotime which may be specifically configured by a tiser. In 
a preferred embodiment, all hello messages are sent using 
the ail-routers IP multicast address 224.0.0.2. The source 
address of the hello message is die router's primary IP 
address, and not die group's active IP addresses. 

In addition to source address, die hello message contains 
the following items: 
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Hic active IP address 
The hello time 
The hold time 
The routers priority 

The routers status (active, standby, new) 
Authentication 
A version number 
A group number 

The authentication is the same for each router in the group i o 
and is provided as a password to ensure that the routers in 
the system get their infannation regarding hellotime. hold- 
time, dynamic IP address, etc. from a packet issued by a 
router within their group. The version number represents the 
implementation of the standby protocol. The group number. 15 
represents the standby group which issued the hello mes- 
sage. 

As explained, when non-active routers on the nelwoik do 
not hear a hello from the active router within a holdtime, 
they may take steps to change their status. In the case of the 20 
current standby router, if it sees the hold time expire on the 
active router, it immediately becomes the active router. In 
the case of the new router, if it sees the hold time expire on 
the standby routor, it then sends a hello message (i.e., it 
enters "speak" state). If within another hold time, no other 25 
routers other than the designed router send a hello message 
of higher priority, then the new router assimies the status of 
standby routers. If» on the other hand, while sending hello 
messages, a given new router receives a hello tnessage of 
higher priority from another new router, then the given new 30 
router stops sending hello messages and becomes ineligible 
to take over as the standby router (at least temporarily). 

An acdve router which decides to leave the network 
should first send a resign message so that the standby router 
can take over smoothly. Only the active router is permitted 35 
to send a resign message. In response to a resign message, 
the standby router automatically becomes the active router. 
In response to the same resign message, the new routers 
begin sending hellos as part of an election to see which one 
of them takes over as standby router. If a given router hears 40 
no hello messages of higher priority than his own within a 
hold time, that router takes over as the standby router. The 
resign message includes all information found in the hello 
messages, but only the status and authentication fields are 
particularly pertinent, 45 

Routers may enter a standby group for various reasons 
such as having previously lost power or otherwise failed. As 
explained, there are two scenarios under which the reenter- 
ing router may assume die role of active router within die ' 
standby group. Which of these scenarios is employed 50 
depends upon whether the incoming router is configured to 
*'preempf * an active routet If it is, the entering router sends 
a coup message to the current active router when it believes 
it has priority over that router. Alter the coup message is 
received by the current active router; the priorities of the 55 
entering and active routers are compared. If the entering 
router has a higher priority, the current active router resigns 
and the incoming router takes over. 

If an entering router is not configured to preempt, it can 
send no coup messages to die active router. However, it can 60 
become a designed router indirecUy. For example, it can first 
become a standby router by taking over for a failed standby 
router as described above. After the incoming router 
assumes standby status, it automatically takes over for the 
current active router when thai router ^s or resigns. 65 

Some options available to a new router entering a standby 
group are detailed in FIG. 5. The process begins at 174 and 



proceeds to a step 176 where the entering router assimies the 
new state. Hiereafter, in a decision step 180, the new router 
determines whether the active router in .its standby group has 
a lower priority than itself (preferably by analyzing hello 
messages from the active router). If so. die new router then 
determines in a decision st^ 182 whether it is configured to 
preempt If so, it sends coup message to the active router at 
a step 184. It then receives a resign message from the active 
router at step 188. Finally, it assumes the status of active 
router at step 190 and the process is completed at 198. 

The protocol of this invention provides for the event in 
which a coup or resign message is lost or not received by the 
new router. If a coup message is lost, there will sinnuilta- 
neously be two active routers. In such situations, the lower 
priority active router (i.e., die original active router) will 
receive a hello message from die other active router within 
the next hello time after the new router assumes active 
status. Upon receiving such hello message, the original 
active routo- will inunediately relinquish its active status and 
revert to new router status. If a resign message from an 
active router is lost, the other routen in the group wiD 
quickly determine that the active router is no longer present 
by the absence of a hello message from thc,active router. As 
explained, if no hello message is received from an active 
router within a hold time, the other routen in the group take 
steps to fill the role of active router and, if necessary, standby 
router. 

Returning again to FIG. 5, if eidier of decision steps 180 
or 182 is. answered in the negative, die new router deter- 
mines whether it can enter the standby state at a decision 
step 194. It can enter the standby state by waiting for the 
current standby router to leave the group or assume active 
router status as detailed in FIG. 4. Alternatively, die new 
router can listen for hello messages from die standby router 
and then compare priorities. If die standby router has a lower 
priority, the new router sends its own hello message to let the 
standby router know that it should relinquish its role. 
Assuming that the new router can not yet enter the standby 
state (ie., decision step 194 is answered in the negative), the 
new router simply waits tmtil an active router with a lower 
priority takes over or the new router itself can assume the 
standby state. That is, either decision step 180 or decision 
step 194 is answered in the affirmative. Assuming that 
decision step 194 is answered in die affirmative, the new 
router determines whether the cuirentiy active router has 
failed or resigned at decision step 196. This is detailed in 
FIG. 3. When such event occurs, the router assumes the role 
of active router at step 190 p e., decision step 196 has been 
answered in the affirmative). 

The procedure for determining the active router's priority 
(step 180) involves first listening for a hello message issued 
by the active routet When such a hello message is received, 
the new (listening) router checks the priority in that message 
against its own priority. If the new router determines that it 
has a higher priority than the active router and it is config- 
ured to preempt, die new router immediately broadcasts a 
coup message to the active router. The coup message 
includes die same fields as contained in the hello message, 
but only the priority, status, and authentication fields are 
particulariy pertinent 

From the active router's standpoint, when it receives an 
acceptable coup message (i.e., one firom a router having a 
higher priority than it own) it resigns from the status of 
active router. This involves removing the group MAC 
address from its address filter and then unicasting a resign 
message to die sender of the coup message. The active router 
then returns to the new state. If die resign message would be 
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broadcast rather than be imicast, the standby router — as 
as the router sending the coup message — would transition to 
active state. 

4. The Router as a State Machine • 

FIG. 6 is a state diagram showing the acceptable slate 5 
transitions of a router of this invention. As discussed above, 
the routers of this invention generally include three states: 
new, standby, and active. However, the new state can be 
further divided into four substates: virgin 200, learn 202, 
listen 204. and speak 206. Typically, the viigin state 200 is 10 
entered when the router undergoes a coniigiiration change or 
when the interface of the standby group first comes up. 
Further, if the protocol of this invention is disabled on a 
netwoik segment, all routers on that segment enter the viigin 
state. A router in the learn state 202 listens to hello messages ^5 
from the current active router in order to leara "minimal 
information" (i.e., the hello and hold timers and virtual IP 
address). This minimal information is releamed any time it 
is heard regardless of the router's current state. It should be 
noted, however, that the informatioii is learned only if the 20 
authentication in the packet containing the information 
matches that of the current router. Once a router in the learn 
state 202 has learned the minimal information, it transitions 
to the listen state 204 were it continues to listen to hello 
messages from both the active and standby routers. A router 25 
in the speak state 206 sends a hello message once every hello 
time. Routers in the learn and listen states send no hello 
messages. As noted above, routers in the active state 210 and 
standby state 208 send also send and listen for hello mes- 
sages. 30 

The state chart shown in FIG. 7 will now be described 
with reference to eleven different events of significance to 
the routers of this invention. These events are the following: 

1 — Hot standby protocol configured on an interface. 

2— Hot standby protocol disabled on an intrface. 35 

3 — Activeluner expiry. 

4 — ^Receive Hello of higher priority router in Speak state. 

5 — Receive Hello of higher priority Active router. 

6 — Receive Hello of lower priority from Active router. 40 

7 — Receive a Resign message from Active router. 

8 — ^Receive a Coup message. 

9— Standbylimcr expiry. 

10— Receive Hello of higher priority Standby router. 45 

1 1 — Receive Hello of lower priority from Standby router. 
The first event is configuring the protocol of this invention 

on a network segment. The virgin state is the only router 
stale existing at this point As shown in FIG. 7, the virgin 
routers start their "active" and "standby" timers. The active 30 
timer sets the hold time associated with the active router. If 
the active timer expires witiiout a hello message being 
received from the active router, the group may assume that 
their active router is inoperative. The standby timer performs 
a similar function for the standby router. After active and 55 
standby timers have been started, a router transitions to 
either the learn or listen state depending upon whether 
mirumal information (this is the timer information and IP 
address) has been discovered. If the minimal information 
has been discovered, the system transitions to the listen 60 
state. Otherwise, it transitions to the learn state. 

Disabling the protocol of this invention on a network 
segment is Uie second event of note shown in FIG. 7. This 
causes routers in every state to first clear their active and 
standby timers and then reenter the virgin slate. The active 65 
router, in addition, sends a resign message before entering 
the virgin state. 
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The third event of note is expiration of the active timer 
This indicates that a router has not received a hello message 
fipom the active router within the hold time. This has no 
effect on routers in virgin, leam, and speak states. However, 
routers in the standby state immediately cleat their active 
timers and assume the status of active router, thus serving 
their function as backup. In addition, routers in the listen 
state restart their active and standby timers and transition to 
the speak state upon expiration of the active timer. This 
permits those routers to be considered for the role of standby 
router, which has now been vacated. 

The fourth event of note is receipt of a hello message finom 
a router in the speak state having a higher priority than the 
router receiving the hello message. Hus effects only those 
routers in the speak and standby states. Any router in the 
speak state receiving such a message, discontinues sending 
hello messages and reverts to the listen state. Thus, only the 
router speaking with highest priority remains in the speak 
state and thereby eligible for promotion. If a standby router 
receives a hello message from a speaking router having a 
priority higher than its own, it starts its standby timer and 
reverts to the listen state. Ttas would occur when a new 
router arrives after there are already active and standby 
routers, and the new router has a higher priority than the 
current standby router. 

Hello messages from the active router can be expected to 
contain a priority dial is higher than tiaal of the receiving 
router. When this occurs (the fifth event of note in FIG. 7). 
routers in the virgin, leam, listen, speak, and standby states 
leam the minimal information (denoted as "snoop" in FIG. 
7). In addition, these routers restart their active timers. 
Routers in the leam state further start the standby timer and 
transition to listen state. If a router currentiy in the active 
state receives a hello message from another active router 
which has a higher priority, the active router receiving this 
message immediately restarts its active and standby timers 
and transitions to the speak state. 

In some instances, most notably when a high priority 
router reenters the standby group, a router may receive a 
hello message from an active router having a priority lower 
than its own (the sixth event of note). In this case, routers in 
the leam, listen, speak, and standby states learn the minimal 
information and restart their active timers. Routers in the 
learn state also, start their standby timer and transition to the 
listen state. Routers in the listen, speak, and standby states 
have the option of issuing a coup message. More specifi- 
cally, if these routers are conflgiied to preempt the active 
router, they will issue a coup message. Otherwise, they will 
remain in their current state. If a coup message is sent, 
routers in the listen, speak, or standby , state then clear tiieir 
active timer and transition to the active state. Routers in the 
listen and speak states also restart their standby timers. If a 
routCT currentiy in the active state receives a hello message 
from a different active router having a lower priority, the 
active router receiving the message then issues a coup 
message. 

In response to a coup message, an active router may issue 
a resign message (the seventh event of note in FIG. 7). 
Alternatively, if the active router decides on its own to 
relinquish it role as active router, it will also issue a resign 
message. Regardless, of the circumstances under which die 
resign message is issued, a router in the listen state receiving 
such message starts its active and standby timers and tran- 
sitions to die speak state. Arouter in the speak stale starts its 
active timer. Hnally, a router in the standby state clears its 
active timer and transitions to the active state. 

As noted, a coup message may only be received by the 
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active router. Whoi it recdves such a message (the dghth 
noteworthy event), it sends a resign message, restarts its 
active and standby timers, and transitions to the speak state. 

The ninth event of interest is expiration of the standby 
timer. When this occurs, routers in the listen state restart 5 
their standby timers and then enter the speak state. Of those 
routers that enter the speak state, the one having the highest 
priority will automatically transition to the standby state. If 
the standby timer expires while a router is in the speak state, 
that router then clears its standby timer and assumes the 
status of standby router. 

When a router receives a hello message from a standby 
router (the tenth noteworthy event), the priority is checked. 
If that priority is higher than the priority of a reed ving router 
in the listen, speak, standby, . or active states, the router 15 
restarts its standby timer. If the receiving router is currently 
in the speak state, it then transitions to the listen state. If the 
router is currently in the standby state, it also, transitions to 
the hsten state. Otherwise, there would be two routers in the 
standby state. 20 

Finally, a router may receive a hello message from a 
standby router of a lower priority. A router in a listen state 
receiving such a message restarts its standby timer and 
transitions to the speak state. A router in the speak state 
receiving such a message dears its standby timer and 2S 
transitions to the standby state. The previous standby router 
would have already relinquished its role in response to a 
hello message from the router in the speak state. 
5. Emulation of a Virtual Router 

As noted, real routers currendy emulating a virtual router 30 
adopt their group's MAC and network layer (e.g., IP) 
addresses. The user setting up the routers in the group can 
provide the group W address by routine programming. Hius, 
the physical router dements involved in designating a 
virtual IP address include the main CPU and main memory. 35 
MAC addresses are typically provided in an address filter or 
"list** of MAC addresses in a router's interface controller. 
The procedure involved in inserting or removing a MAC 
address &om the address filter depends upon the particular . 
router being configured, but genex^y involves only routine 40 
progranuning. Preferably, the routers of this invention are 
able to add virtual MAC addresses to their controllers' MAC 
address filter while maintaining their primary MAC 
addresses. In some cases, a router will actually be capable of 
having multiple virtual MAC addresses while maintaining 45 
its primary MAC address. A technique for handling routers 
which are unable to handle more than one MAC address in 
their address filters is presented below. 

In a token ring arrangement, the virtual MAC address can 
be obtained from 1 of 32 well-known 'functional addresses" 50 
used by protocols over token ring. It is important to choose 
a functional address that is not going to be used in the system 
in which the standby protocol is running. One such suitable 
MAC address for token ring arrangements has been found to 
be COOO.0001.0000. 55 

In broadcast-based LANs with location insensitive link 
layer addresses (e.g., ethemet and FDDI LANs), the virtual 
MAC address can be purchased from the IEEE. Suitable 
MAC addresses may be 1 of 256 addresses selected from the 
range 000.0c07.ac00 thru OOOO.OcOa.acff. The last octet of 60 
this MAC address equals the standby protocol group num- 
ber. 

Unfortunately, some router controllers support address 
filtering for only one unicast MAC address. Such routers can 
still be used in the standby protocol of this invention, but the 65 
protocol must change the interface's primary MAC address 
when assuming or relinquishiog cormol as the acdve router. 



This is potentially problematic because some trafiSc may 
otherwise wish to use the router's primary. MAC address. 
However, the problem can be mitigated by having the router 
send out gratuitous ARP C'address resolution protocol") 
packets so that other network entities using IP update their 
ARP tables to refiea that the router is now using a group 
virtual MAC address rather than its primary MAC address. 

While ninning the standby protocol, it is important to 
prevent the host firom discovering the primary MAC 
addresses of the routers in its standby group.. Hius, any 
protocol which informs a host of a router's primary address 
should be disabled. In IP, one such protocol involves sending 
ICMP redirect packets. These are intended to tell a host of 
the existence of alternative routes and in so doing require the 
host to discover a router's primary address. For example, if 
the active router recdves a packet and deddes that the 
optimal route is through the standby router, the active router 
could, under normal circumstances, send redirect instruc- 
tions (an ICMP redirect packet) to the host. This would tell 
the host to use the standby router, and the host would then 
issue an ARP request for the standby router's primary 
address. Thereafter the host would route packets through the 
standby router and would use the real standby router MAC 
address (as opposed to the group virtual MAC address). 
Thus, the host is again susceptible to failure if the standby 
router goes down. In this inveruion, this dif&culty is over- 
come by disabling the group routers' capacity to issue ICMP 
recUrect packets so that the host can never discover a router' s 
primary MAC address. This disabling can be accomplished 
by simply programming the group routers such that they do 
not send out ICMP redirect packets when the standby 
protocol of this invention is running. 

Various emulation functions of this invention can be 
configured on a router by prograrruning or encoding special 
instructions. Such functions include (1) blocking ICMP 
redirect packets from being sent when die standby protocol 
is rurming, (2) changing a router's status in response to 
certain events, and (3) the ability to control a router's 
preempt capadty. lliese functions are generally imple- 
mented in the same marmer as they would be in any general 
purpose router or digital computer. TTiat is, the instmctions 
for a function are processed by one or more processing uiuts 
(such as a CPU chip) . and stored in dynamic volatile 
memory, ROM. dynamic non-volatile memory, eto. 

In a preferred embodiment, configurations for IP 
addresses are stored in dynamic non-volatile memory of a 
router. Group addresses are hard-coded into the system 
software. Packet forwarding is supported by system soft- 
ware, and requires configuration information firom dynamic 
non-volatile memory. Further, packet forwarding functions 
leani information from routing protocols which get stored in 
dynamic volatile memory. 

Although the foregoing invention has been described in 
some detail for purposes of darity of understanding, it will 
be ^parent that certain changes and modifications may be 
practiced within the scope of the appended claims. For 
instance, although the spedfication tms described routers, 
other entities used to send packets firom a host in one LAN 
to destinations outside of that host's LAN can be used as 
wdl. For example, bridges or other less intelligent packet 
switches may also employ the standby protocol of this 
invention. Further, the above-described preferred embodi- 
ment describes protocols in which routers compare priorities 
to determine which of tiiem should become the active router 
and which of them should become the standby routet ^tiiin 
the scope of this invention, various other methods can be 
used to conduct dections to determine active and standby 
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routers. For example, a router's current and recent param- 
eters may be used to adjust its priority. 
What is claimed is: 

1. A router for use with a network segment having a 
plurality of routers and a plurality of hosts which address 5 
data padcets to an active router from the phiiality of routers, 
the router having a memoiy and a processor and con^iising: 

a primary router address stored in the router; 

a group virtual address stored in the router, which group 

virtual address is adopted by the router when it ^0 

becomes the active router of the network segment; 
means for adopting the group virtual address; 
means for issuing a coup message to notify a cunent 

active router that the router will attempt to become the ^ ^ 

active router, and 
means for disabling, at least temporarily, the means for 

issuing a coup message. 

2. Hie router of claim 1 further comprising means for 
assuming a status of standby router for baddng up the active 20 
router. 

3. TTie router of claim 1 further comprising: 

a priority specifying the router's relative likeHhood of 
becoming the active router in comparison to other 
routeis in the network segment; and 2S 

means for automatically comparing the priority of the 
router with the priority of the current active router in 
the network segment 

4. The router of claim 1 further comprising: 

means for issuing a resign message; and ^ 
means for removing the group virtual address from an 
address filter after the resign message has been issued. 

5. The router of claim 2 furtho" comprising means for 
issuing a heUo message to notify other routers in the network ^ 
segment that the router is operating. 

6; The router of claim 5 further comprising: 
means for detecting when a hello message has not been 
received from the current active router within a prede- 
termined time; and 40 
means for automatically changing from the status of 
standby router to the status of active router when no 
hello message has been received from the current active 
router within said predetermined time: 

7. The router of claim 5 wherein the hello message 45 
includes a router priority, a router status, and the group 
virtual address. 

8. The router of claim 1 further comprising: 

means for automatically inserting the group viitual 

address into an address filter when the router assumes ^0 

the stams of active router, and 
means for removing the group virtual address from the 

address filter when the router resigns the stams of 

active router. 

9. The router of claim 1 wherein the means for adopting 
the group's virtual address includes an address filter 

10. A netwoik segment providing a redundant routing 
capability, the oetwoik segment comprising: 

at least one host on a LAN, said host including means for ^ 
addressing data packets to a virtual router; 

at least two physical routers connecting the host's LAN to 
at least one other netwoik segment, each router capable 
of assuming the states of active and standby router, the 
active router communicating with the host and the 65 
standby router backing the active lomer, and 

means for selecting the active router and the standby 



router from among the at least two ronton, wherem said 
active router includes means for emulating a virtual 
router, and wherein each physical router is provided 
with the ability to issue coup messages for notifying the 
active router that the physical router will attempt to 
become the active router, and wherein the ability to 
issue coup messages can be disabled at least tempo- 
rarily. 

11. The network segment of claim 10 further comprising 
means for auromatically replacing the active router with 
another router when p:edetermined criteria are met by 
causing the other router to emulate the virtual router and 
causing the active router to discontinue emulating the virtual 
router. 

12. The network segment of claim U wherein the means 
for replacing the active router includes: 

means for determining when a router having a higher 
priority than the active router enters the network; and 

means for disabling, at least temporarily, the means for 
replacing the active router with another router. 

13. The network segment of claim 11 wherein the means 
for replacing the active router includes: 

means for determining when the active router is no longer 
functioning; and 

means for automatically replacing the active router with 
the standby router by causing the standby router to 
emulate the virtual router and the active router to 
discontinue emulating the virtual router. 

14. The network segment of claim 10 further comprising 
means for preventing the host from communicating directly 
with the active router. 

15. The network segment of claim 14 wherein the means 
for preventing the host from comnumicating with either the 
standby or active router includes a means for preventing 
ICMP redirect packets from being sent to the host by routers 
in the group. 

16. The network segment of claim 10 wherein the virtual 
router has an IP address and a MAC address, each of which 
is distinct from the IP and MAC addresses of die two or 
more routers. 

17. The network segment of claim 16 wherein the MAC 
address is an FDDI or ethemet MAC address for a nonfunc- 
tioning router. 

18. The network segment of claim 16 wherein the MAC 
address is a token ring functional address which is unused by 
any IP protocols on the router. 

19. The network segment of claim 10 wherein the means 
for selecting an active router and a standby router includes 
means for determining a priority of the routers in the 
network segment 

20. The network segment of claim 10 comprising at lea^ 
tiiree physical routers connecting the host's LAN to at least 
one other network segment. 

21. A method of backing up a router with which a host 
conununicates in a network having multiple routers, each 
router having a priority, the method comprising the follow- 
ing steps: 

specifying an active router for routing data packets from 
the host; 

specifying a standby router which backs up the active 
router, 

causing said active router to emulate a virtual router; 
causing the host to address data packets to said virtual 
router; and 

automatically selecting a new active router based upon a 
comparison of the priorities of the multiple routers in 
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the network, wbcrcm said active and standby routers 
are provided with the ability to issue coup messages for 
notifying another active router that the active or 
standby router will attempt to become the active router, 
and wherein the ability to issue coup messages can be 5 
disabled at least temporarily. 

22. The method of claim 21 wherein the step of selecting 
a new active router includes: 

detecting a coup message from a new router indicating 
that it wishes to take over as the active router, and '0 

selecting the new router as the active router if its priority 
is higher than that of the active router. 

23. The method of claim 22 further comprising a step of • 
determining whethCT the new router is configured to preempt 
the active router. 

24. The method of claim 21 wherein the step of selecting 
a new active router includes: 

determining when an active router has left the netwoik; 
and 

if the active router has left the networic, selecting the 
standby router as the active router. 

25. The method of claim 21 further comprising: 
detecting a resign message issued by Che active router to 

notify the other routers in the network that it will be 25 
resigning from its stams as active router, 
causing the active router to stop emulating the virtual . 
router; and 

causing the standby router to emulate a virtual router. 

26. The method of claim 21 further comprising a step of 
replacing the active router with the selected new active 
router by causing the selected new active router to emulate 
the virtual router and causing the active router to discontinue 
emulating the virtual router. 

27. The method of claim 21 wherein the step of causing 
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the host to address data packets to the virtual router includes 
a step of configuring tfaie host to address data packets to IP 
and MAC addresses for the virtual router. 

28. The method of claim 27 further comprising a step of 
configuring the active router with the virtual router IP 
address to which the host is configured to address data 
packets. 

29. A router for use with a network segment having a 
plurality of routers and a plurality of hosts which address 
data packets to an active router from the plurality of routers, 
the router comprising: 

a memory; 

a processor coupled to said memory; 

one or more interfaces for sending and receiving data 
packets on a network, wherein said memory and said 

, processor are adapted to provide (a) a primary routa* 
address and (b) a group virtual address which is 
adopted by the router when it becomes the active router 
of the network segment, and wherein said memory and 
said processor are adapted to (c) issue a coup message, 
through said one or more interfaces, to notify a current 
active router when the router will attempt to become 
the active router, and (d) disable, at least temporarily, 
the router's ability to issue a coup message. 

30. The router of claim 29 wherein the memory and 
processor are further adapted to assume a status of standby 
router for backing up the active router. 

31. The router of claim 29 wherein the memory and 
processor are further adapted to issue, through one of said 
one or more interfaces, at least one of a resign message to 
relinquish a stams of active router or a hello message to 
notify other routers in the network segment that the router is 
operating. 

***** 
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